f95987e7f0d6c483ce6a3cae1d03c600_NEIKI | Triage

Sharing

Copy URL Twitter E-mail

General

Target

f95987e7f0d6c483ce6a3cae1d03c600_NEIKI
Size

182KB
MD5

f95987e7f0d6c483ce6a3cae1d03c600
SHA1

75679c279991eccffbbe21c94eadc2623c305311
SHA256

c35f2ea628a1f83e1837fdd6d0da0fe49535003d74a68ee5f6418c495213fd54
SHA512

328b53bca212655a4e46fc7eab3b0499b8d2beeb1189705700bf683519314e95e2036370e93aa527361f0263692cdeb7e0f0cc12329bada1482dd60463fe0713
SSDEEP

1536:UkPpSkjp8MfXiqJZ97Wl7iCizrxEDNhgT1/ceME80XsBuLXk/TOp9NUB6w+MsHqR:fmMfXFsWvxSTgT1/ceMoMTmNUB65M0g

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
f95987e7f0d6c483ce6a3cae1d03c600_NEIKI

Files

f95987e7f0d6c483ce6a3cae1d03c600_NEIKI
.dll windows:4 windows x86 arch:x86

dae02f32a21e03ce65412f6e56942daa

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

PDB Paths

c:\Windows\Microsoft.NET\Framework64\v4.0.30319\Temporary ASP.NET Files\root\850b8287\ae2d3fe9\App_Web_wjdsmvhx.pdb

Imports

mscoree

_CorDllMain

Sections

.text
Size: 84KB - Virtual size: 83KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 97KB - Virtual size: 96KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ